<textarea></aaaaa... should insert a text node?

[zcorpan]

@RReverser found this in #1257 (comment)

http://software.hixie.ch/utilities/js/live-dom-viewer/saved/4224

  window[0].document.write('<textarea></textar');

So far so good; no EOF yet (no document.close()) and a script might later write ea> to finish the end tag.

Now consider

http://software.hixie.ch/utilities/js/live-dom-viewer/saved/4225

  window[0].document.write('<textarea></textart');

Per spec this should have the same DOM as the previous one, and the parser having consumed </textart into the temporary buffer, waiting for a > or space or slash or EOF.

Two problems:

• This can cause unnecessary OOM in streaming parsers that implement the spec literally, for <textarea></aaaaaa...
• Browsers disagree for this case; Gecko seems to check each character if it still matches what is expected, while WebKit/Blink/IE11 seem to fill the temporary buffer like the spec.

[zcorpan]

cc @hsivonen